Valentin Lobstein (Chocapikk)

Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1

Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Softaculous Virtualizor OS Command Injection via Billing Module Handler

Softaculous Virtualizor Authorization Bypass via Billing Module Handler

FileRun < 2026.3.0 Authenticated SQL Injection via Groups Add Action

FileRun < 2026.3.0 OS Command Injection via escapeshellcmd() No-Op Redefinition

FileRun < 2026.3.0 OS Command Injection via PhotoProofSheet Handler

FileRun < 2026.3.0 PHP Object Injection via Perms::getPerms()

MagnusBilling Stored Cross-Site Scripting in Alarm Module

MagnusBilling Stored Cross-Site Scripting in Login Logs